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The intrinsic unpredictability of measurements in quantum mechanics can be used to produce genuine 
randomness. Here, we demonstrate a random number generator where the randomness is certified by 
quantum contextuality in connection with the Kochen-Specker theorem. In particular, we generate random 
numbers from measurements on a single trapped ion with three internal levels, and certify the generated 
randomness by showing a bound on the minimum entropy through observation of violation of the 
Klyachko-Can-Binicioglu-Shumovsky (KCBS) inequality. Concerning the test of the KCBS inequality, we 
close the detection efficiency loophole for the first time and make it relatively immune to the compatibility 
loophole. In our experiment, we generate 1 X 10 5 random numbers that are guaranteed to have 5.2 X 10 4 bits 
of minimum entropy with a 99% confidence level. 



Random number generation is important for many applications 1 ' 2 . For cryptographic applications, random 
numbers should have good unpredictability in order to be secure under attack by the adversaries 3 . Genuine 
random numbers can never be generated by a classical device because any classical device bears in principle 
a deterministic description. Quantum mechanics, on the other hand, has intrinsic randomness, and thus can be 
explored to construct a genuine random number generator. There have been many demonstrations of random 
number generators based on quantum principles 4 " 14 . 

Self- certified random number generation is an advance made recently, where the randomness is guaranteed by 
violation of certain fundamental inequalities 14 " 16 . In particular, it was proposed in Refs. 14,15 that through 
violation of the Clauser-Horn-Shimony-Holt (CHSH) inequality, one can certify the generated random numbers 
in a device-independent fashion that is secure against the adversaries who have only classical side information 17 . 
The first proof- of-principle experiment for this scheme has been recently demonstrated 14 . 

We consider here a scenario where the provider of the device is assumed to be honest. However, we still need to 
physically certify that the random numbers are generated due to the intrinsic uncertainty of quantum mechanics 
instead of some uncontrolled classical noise process in the device. In this case, we can use quantum contextuality 
manifested through the violation of certain Kochen-Specker (KS) inequality to certify the generated random 
numbers 1819 . Quantum contextuality is a basic property of quantum mechanics, where the measurement out- 
comes depend on the specific context of the measurements 20 ' 21 . Quantum contextuality would be revealed by 
violations of some KS inequalities, and such violations can be observed even in a single indivisible system without 
any entanglement 22 " 27 . Because there is no need of entanglement, a certification scheme of random numbers based 
on the KS theorem can significantly simplify the experimental requirement and generate certified random 
numbers with a much higher speed 18 . A proof-of-principle experimental implementation of this idea has been 
reported with a photonic system quite recently 18 . 

A particular type of the KS inequality, the Klyachko-Can-Binicioglu-Shumovsky (KCBS) inequality 22 , is 
convenient for certification of random numbers. Violation of the KCBS inequality has been observed before in 
a single-photonic system 23 . For experimental test of the KCBS inequality, there are two possible loopholes: the 
detection efficiency loophole if the detectors only register a subset of data due to their inefficiency, and the 
compatibility loophole, which occurs if additional assumptions are required to guarantee that the observables 
with simultaneous assignment of values in the KCBS inequality are compatible with each other and remain 
identical when their measurement contexts change. The test of the KCBS inequality with the photonic system is 
immune to the compatibility loophole 23 , however, it requires the fair-sampling assumption due to the low photon 
detection efficiency and thus subject to the detection efficiency loophole. 
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In this paper, we report a random number generator certified by 
quantum contextuality with a single trapped ion, which allows us to 
close the detection efficiency loophole for the first time for the KCBS 
inequality. For the compatibility, we follow basically the same con- 
figurations as in Ref. 23, where errors in compatibible measurement 
settings only reduce the amount of the violations. Even with experi- 
mental noise and imperfections, we get significant violations of the 
KCBS inequality, which lead to lower bounds the minimum entropy 
of the generated random string. Compared to the experimental cer- 
tification based on the CHSH inequality 14 , the generation rate of 
random numbers is increased by about four orders of magnitudes 
in our experiment, which is important for practical applications. 

The paper is organized as follows. First, we introduce the KCBS 
inequality and show the experimental violation of this inequality. 
Then, we introduce the relation between the violation of the KCBS 
inequality and the minimum entropy of the generated random string 
for the case of an honest provider, and compare the theoretical pre- 
diction with our experimental observation. The generated random bits 
are tested under uniform or biased choice of measurement settings. 
We conclude the paper by summarizing the results and discussing 
further improvements of our random number generation scheme. 

Results 

The KCBS inequality. The Kochen-Specker theorem states that the 
results of quantum mechanics cannot be fully explained by non- 
contextual classical theories which assume that the measurement 
outcomes of a physical system are predetermined and independent 
of their own and other simultaneous compatible measurements 20,21 . 
The KCBS inequality illustrates the conflict between quantum 
mechanics and non- contextual classical theory in the simplest 
possible system with the Hilbert space dimension d = 3 22 . 

The KCBS inequality is connected with the following simple algeb- 
raic equation. 

a\Cl2 + #2^3 +#3#4 + #4#5 +fl5#i > — 3, (l) 

where the value of a t is either 1 or — 1. If the values of the observables 
are predetermined, the average of the left hand of the above equation 
should be no less than —3, leading to the following inequality: 



(Xkcbs) = (MA 2 ) + (A 2 A 3 > + (A 3 A 4 > + (A 4 A 5 > + (A 5 Ai> > -3. (2) 

In quantum mechanics, however, the outcomes of A t do not have 
predetermined values, which allows violation of the KCBS inequality 
(2) for a specific state \i// 0 ) in systems with d > 3. In the case of d = 3, 
we denote the bases by |1), |2) and |3) and the observable A b repre- 
sented by Aj = 1-2 \v t ) (v/|, is the projector on the axis \v t ). The 
maximal violation of the KCBS inequality (2) is achieved for the state 
along the symmetric axis of the pentagram shown in Fig. 1(a). Here 
|vi> = |1>, \v 2 ) = |2>, |v 3 > = 2*i (y,0) |vi>, |v 4 ) = R 2 (y 9 0) |v 2 ), |v 5 > = Ri 
(y, 0) |v 3 > and |vi) = £ 2 (y,0)|v 4 ), where y = 51.83° and R h2 denote 
the rotation operations between |1) to |3) and between |2) to |3), 
respectively. Maximal violation the KCBS inequality is achieved 

1 1 / 2~ 
under the state |^ 0 ) = — 11) + — 12) + J 1 — 13) (2), with the 

corresponding value (Xkcbs) = $ — — 3.944. 

Figure 1(b) shows the scheme for preparation of the initial state \i// 0 ) 
starting from the basis state |3), and Fig. 1(c) -(g) describe the imple- 
mentation of the measurement configurations along the five axes. To 
ensure context independence, we emphasize that the measurement 
configuration of A,- remains the same when it is measured with either 
Aj_i or A i+ i (let A 0 = A 5 , A 6 = Ai). For example, the scheme for the 
measurement A 2 is exactly the same in the first [Fig. 1(c)] and the 
second stage [Fig. 1(d)]. To move to the second configuration, we 
perform a rotation between the states |1) and |3), which does not 
influence the state |2) that corresponds to the observable A 2 . Only the 
observable related to the state 1 1) is changed from A x to A 3 . 

The configuration for the measurement of A x in Fig. 1(c) is not the 
same as that in Fig. 1(g), which is therefore denoted by A 1 . If A x and 
Aj are not identical, it is possible to violate the inequality (3) even in 
classical theory. To solve this problem, similarly to Ref. 23, we use a 
new inequality that includes the observable A Y with the form 
(x'kcbs) = (AiA 2 > + (A 2 A 3 > + (A 3 A 4 > + (A 4 A 5 > + 

(asa^+Ji-^a;)]^^. (3) 

Note that the inequality (3) becomes the original KCBS inequality (2) 
when Ax = A x . Therefore, the difference between two measurements 
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Figure 1 | The representation in 3d space and pulse sequences of a state and measurement configurations for the maximal violation of the KCBS 
inequality (2). (a) The five vectors form a regular pentagram, which represent observables A\, A 2 , * * * , A 5 that are the projectors on them. The vectors 
related to observables A b A i+1 are orthogonal, which makes the neighboring observables compatible. The initial state li/^ 0 ) for the maximal violation is 
located at the center axis (blue arrow) of the pentagram. The initial state and measurements of the compatible observables are realized by the pulse 
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sequences shown in (b) and (c)-(g). (b) The pulse sequence to prepare \ip 0 ) = - 



U> + ^|2> + 



=|3). Here, Ri and R 2 represent the coherent 



v 7 ^ v 7 ^ V 

rotations between 1 1) to 1 3) and between 12) to 1 3), respectively, where 6 = 41.97° and </> = 64.09°. The sequence starts from 1 3) state (black filled circle) 
after optical pumping, (c)-(g) The pulse sequences for the measurement configurations (c) A X A 2 , (d) A 2 A 3 , (e) A 3 A 4 , (f) A 4 A 5 , (g) A 5 A p where 
y = 5 1 .84°. The important aspect of the configuration is that the measurement scheme for A f is perfectly unchanged when it is measured with either A { _ x or 
Aj+i except A l5 similarly to the photon realization 23 . The pulse sequence for the confirmation of the identicalness between A x and A x is shown in Fig. 2(d). 
For the random number generation, we choose one of the five configurations shown in (c)-(g) based on software random numbers. 
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decrease the violation that can be obtained in the experiments 23 . 
Another possible way out is to introduce an empirical parameter to 
upper bounds the violation of compatibility, which would be similar in 
spirit to a recent work where a parameter in introduced to bound 
violation of the locality loophole for test of the Bell inequality 28 . Any 
imperfection in the initial state preparation or final measurements only 
leads to a reduction of violation of the KCBS inequality, so a significant 
violation of this inequality guarantees that the randomness comes from 
the quantum origin instead of a classical noise process. 

Experimental violation of the KCBS inequality. The violation of 
the KCBS inequality have been observed with single photons 18,23 , 
however, those experiments are subject to the detection efficiency 
loophole. Here, we present the experimental violation of the KCBS 
inequality in a single trapped ion. Because of the high detection 
efficiency for the trapped ion, we close the detection efficiency 
loophole for the first time for this inequality. 

We perform the test of the KCBS inequalities (2) with a single 
trapped 171 Yb + ion in a four-rod radio-frequency trap 26 ' 29 . The qubit 
states are represented by the two internal levels in the S 1/2 ground- 
state manifold, with \F = 1, m F = 0) = | |> and \F = 0, m F = 0) = 1 1). 
The transition frequency between ||) to \[) is w HF = (2n) 
12642.821 MHz, determined by the hyperfine interaction. 

The procedure of the experiment consists of Doppler cooling, 
initialization, coherent operation, and detection (see the Method 
Section). The initial state preparation and the measurement config- 
urations are shown in Fig. 1(b) -(g), and they are realized by two 
microwaves with the frequencies Wi and w 2 , which produce Rabi 
oscillations R x (0 ls (j>i) and R 2 (0 2 , fyi) between 1 1) to |2) and between 
1 1) to 1 3), respectively. Here, 0i y2 and </>i )2 are controlled by the dura- 
tion and phase of the microwaves. #i ($i, </>i) and R 2 (0 2 , (j>i) are have 
the following explicit forms 
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For experimental convenience, we transform the observable A { to 
Vf = (1 — A f )/2, which is assigned to value v z - = 0 when photons are 
detected or V; = 1 when no photons are detected. With V h the KCBS 
inequality (3) is rewritten as 

(x'kcbs) =5-4£<V / > + 4^ (y < V <+1 > + (v 5 v' 1 )j+ ^ ^ 



i=l 

4<v 1 )-4(v 1 v 1 



i=i 
> -3. 



We obtain (V^ by mapping the axis v { to the state |3) and then mea- 
suring the probability P| 3 > (v z - = 1) = (V t ) (Fig. 2(b)). For simplicity, let 
P| 3 > = P. The correlation terms (VfVj+i) are obtained by sequential 
measurements depicted in Fig. 2(c). First, we transfer V t on the state 
1 3) and apply the standard fluorescence detection scheme. If we detect 
photons, the state should not be |3) and we assign v { = 0 to the 
observable V b where the outcome of the correlation term V,-V} vanishes 
and no further measurements are needed. If we detect no photons, we 
assign v { = 1 to the Vf. Then, we apply the swapping microwave 71-pulse 
that converts Vj to 1 3) before another round of fluorescence detection. If 
we observe photons, v ; = 0, and if no photons, Vj = 1. We asign the 
value 1 to the correlation term V t Vj only when we detect no photons for 
both rounds of measurements. We obtain the average of the correlation 
term (V t Vj) = P (v f = v i+1 = 1) by repeating the same experimental 
sequence many times 26 . 

The expectation value ( V\ V l ) is obtained by the scheme shown in 
Fig. 2(d). If V\ = V[ ideally, the correlation ( Vi V l ) shoud be same to 
(Vi) since V\ is projection operator V\ = V\. The state |1) at the 
beginning of Fig. 1(g) corresponds to the observable V iy which is 
exactly the same configuration as in Fig. 1(c). Therefore, if photons 
are detected (v x = 0) or not detected (v x = 1) at the place where Vi 
would be measured, photons should be observed (v[ = 0) or not be 
observed (v 1 = 1) for the v 1 shown in Fig. 2 (d). After repeating the 




Figure 2 | The trapped 171 Yb + ion system and detection schemes (a) The schematic diagram of trapped ion 171 Yb + experimental setup for observing the 
violation of the KCBS inequality and for generating random numbers certified by the inequality. The three states I F = 1, m F = 0), I F = l ) m F = 1), and 
IF = 0, m F = 0) in the S m ground state manifold are mapped onto 1 1), 12), and 13), respectively. One of the five measurement configurations in 
Fig. l(c)-(g) is chosen by the software generated random number and the pulse sequence of the chosen setting is transfered to the arbitrary wave form 
generator and is applied to the ion through the amplifier. Depending on the photon counts on the PMT, we assign values on the observables mapped on 
the state 1 3). (b) The detection schemes for obtaining results of single observables V iy Vj. First, V f or Vj is mapped to the state 1 3) and apply the standard 
fluorescent detection method. If we detect photons (no photons), we assign zero (one) on the observable V) or Vj. After repeating the same pulse sequence 
and the detection, we obtain the average value of the observable, (c) The sequential measurement scheme for the correlation VfVj. VjVj has a value one 
when both of Vj and Vj have one, where no photons are detected at each stage, (d) The experimental confirmation of the identicalness of V x and V[ . Ideally, 
whenever Vi has a result one (no photons), V 1 should have the same result (no photons). Any imperfection or changes in the system will cause the 
mismatch of them, which reduces the violation in the extended KCBS inequality (3). 
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sequence of Fig. 2(d), we acquire the probability that no photons are 
measured (P(vi = v x = l)), which gives (Vi V^) by definition. 

We randomly choose one of the five configurations (c)-(g) of 
Fig. 1 based on computer generated random numbers and perform 
the sequential measurements. We change the order of sequential 
measurements ( ViV)+i or V,-) with equal probability. We occa- 
sionally check the overlap of V x and v 1 . We repeat the sequences 1 X 
10 5 times and observe (xkcbs) = 3.852(0.030), which violates the 
extended KCBS inequality (3,4) by 31 a. The detailed results of the 
measurements are summarized in Table 1. We emphasize that our 
result of the violation cannot be explained by any non-contextual 
classical theory which does not exploit the compatibility loophole 
(the detection loophole is closed in our experiment). In other words, 
any classical part of the system such as technical noise, imperfections 
and/or unexpected changes of control parameters can not produce 
the violation. Therefore, as long as we observe the violation of the 
inequality, we can ensure that the outcomes of our measurements 
originate from quantum mechanics. 

The relation between violation of the KCBS inequality and the 
min-entropy. We establish the relation between violation of the 
KCBS inequality (2, 4) and randomness of the generated string 
from the experiment, similar to the photonic demonstration 18 . We 
focus on the scenario with an honest provider of the device 17 rather 
than the extreme adversary scenario where the device has been 
produced by a malicious manufacturer. Even though we trust the 
device provider, we still need to ensure that the randomness of the 
generated sequence is caused by quantum uncertainty instead of 
technical noise 17 . For this purpose, we assume: (1) the system can 
be described by quantum theory; (2) the input at /th trial is chosen 
from a random process that is independent and uncorrelated from 
the system and its value is revealed to the system only at step /; (3) the 
outcomes of the corresponding pairs of measurements at step / are 
compatible (the measurement of one observable does not influence 
on the marginal distribution of the results of the other observable); 
(4) the adversary does not have any capability of controlling the 
inside of the system. The first and the second assumptions here are 
identical to those made in the certification scheme of Bell's 
inequality 14 . The third is the contextuality assumption that replaces 
the role of locality assumption for the Bell inequality. The fourth is an 
assumption about the honest provider 17 . 



We consider five sets of measurement configurations S = {AiA 2 , 
A 2 A 3 , A 3 A 4 , A 4 A 5 , A5AJ, where A t is the observable with the output 
cij = ±1 and compatible with A,-_i and A /+1 . We can rewrite the 
KCBS inequality (2) as 

5 

l=J2Y1 [ p ( fl * = Ui + 1 i A iAi + 1 ) - p ( fl *^ Ui + 1 \ AiAi + 1 )] ^ 3 ' ( 5 ) 

i=l ai,aj 

where P (a,- = a f +i|A/A f+1 ) or P (a* 7^ a i+ 1| A/A /+1 ) is the probability 
that the output results are the same or different for a chosen mea- 
surement setting AiA i+1 . Note that we change the sign of the inequal- 
ity to make the derviation similar to that in Refs. 14,17,30. In our 
experiment, since we use the observable V) (result V/=0,1) intead of 
Aj and only distinguish the event of v { = v,- +1 = 1 from others, the 
Eq. (5) is modified as 

5 

I=-5 + 4 j>(v, = l|Vi»- 

i=l 

^P{vi = v i+l = \\ViV i+l )\<\ 

where P (v f = 1 1 V,-) is the probability that the output result v,- is 1 at a 
measurement setting V*. The result of terms inside { • • ■ } is ideally 
zero and non-zero positive value can be occurred by experimental 
errors or imperfections, which only reduces the amount of violation 
from the optimal. Therefore, we can conclude that the experimental 
violations of the inequality (6) arise from solely quantum mechanical 
origin not any classical mean. 

In our relization, we estimate the violation of the inequality (6) by 
repeating the sequences n times and additional runs n cc of the com- 
paribility check, the measurement setting V\ V[ . The estimation L of 
Eq. (5), obtained from the experimental data, is written as 



— SDP 




3~~ 3^3 3^6 3.94 

KCBS expectation L 



Figure 3 | The min-entropy vs. the violation. The functional) in Eq. (8) 
depending on the violation L of the KCBS inequality (5), which is 
calculated by semi-definite programming (SDP). The function /(L — e) at 
various confidence levels (1 — e') such as 90%, 99% and 99.9% are plotted 
for the uniform choices of measurement configurations, where 
e = (£m max + l/r)^/ — 2\ne'/n and r = min.P (A f A i+1 ) = 1/5. Here we 
divide interval with the spacing C m — £ m _i = (£>m max — 3)/10( = 0.0944). 
Given a measured L and confidence level, we can estimate the min-entropy 
of a generated random string as summarized in Eq. (8). Note that we ignore 
the term log 2 S in Eq. (8) that does not have dependence on the trial n. 



Table 1 | Experimental results for each of five settings and five joint 
probabilities for the KCBS inequality (4). We also perform the same 
experiments with exchanged order. The total trials of the experi- 
ment are 1 X 10 5 . The standard deviations of the final result are 
0.005 and 0.001 for the single observables and correlations, 
repectively as shown in the parenthesis. Our experimental test 
clearly shows the violation of the extended inequality (3) with 31 a 



Setting 


P|3> 




Correlations 




Term 


Ideal Result 


Term Ideal 


Result 


Fig. 1(c) 


<v,> 


0.452(5) 


<V!V 2 > 


0.014(1) 




<v 2 > 


0.446(5) 


<V 2 Vi> 


0.015(1) 


Fig. 1(d) 


<v 2 > 


0.448(5) 


<v 2 v 3 > 


0.016(1) 




<v 3 > 


0.436(5) 


{V3V2) 


0.016(1) 


Fig. 1(e) 


<v 3 > 


0.447 0.428(5) 


{V3V4) 0 


0.014(1) 




<v 4 > 


0.443(5) 


<v 4 v 3 > 


0.016(1) 


Fig. 1(f) 


<v 4 > 


0.464(5) 


<v 4 v 5 > 


0.015(1) 




<v 5 > 


0.439(5) 


<v 5 v 4 > 


0.014(1) 


Fig. 1(g) 


<v 5 ) 


0.443(5) 


<V 5 Vi> 


0.017(1) 




<Vi> 


0.431(5) 


<ViV 5 > 


0.014(1) 


Fig. 2(d) 






(VtVi) 0.447 


0.451(5) 



(x'kcbs)(= ~L= -3.944) = -3.852(30) 
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L=-5 + lt N( Tf° 

/4^ N(v f = v f+ i = l|V f V;- + i) ^5 = ^ = 11^5^) ] 
\nfri P{ViV i+l ) nP(V 5 V[) j 

(7) 

_ " 4N(vi = l|yi) _ 4N(vi = v 1 = l|yiV / 1 ) " 
~ nP(y\) V cc _ ' 

where N (v; = 1 1 V,-) or AT (v,- = v,-+i = 1| ViV/+i) is the number of 
times that the outcome v { or v t - and v /+1 is one under a measurement 
setting V) or V) and Vf+i, respectively. P (V,-) or P (V)Vf+i) is the 
probability with which a measurement configuration V f or V,- and 
V/ +1 is chosen. Note that positive result of terms inside {•••} and 
[ • • • ] originates from the experimental flaws, which only reduces the 
amount of violation. 

The randomness of a single generated bit v,- from a measurement 
setting Vj can be characterized by the min-entropy H OD (vi\Vi) = 
— log 2 [max Vf P(v,- 1 V/)], where P {v i \V l ) is the conditional probability 
of obtaining v,- when the input setting V,- and the maximum is taken 
over all possible values of the output string. The theorem 1 of Ref. 17 
shows that the min- entropy of the generated string after n trials is 
bounded by 

Hoo (v| V, m) > nf(C m -e)+\og 2 5, (8) 



where C m (m = 0,1, • • • m max ) is a series of KCBS violation thresholds 
with Co = 3 the classical bound, and C mmax = 4^ — 5 the maximum 
violation, and e = (C mmax + 1/r) ^/ — 2lne r / rc, with r the smallest 
probability of input choices min f P ( V f ). The parameter e' parameter 
denotes the closeness between the resulting distribution that char- 
acterize k successive uses of the device and another extended distri- 
bution that is well defined mathematically. The function/is found by 
semidefinite programming at various expectations L. Fig. 3 presents 
how the min-entropies are affected by the confidence levels, 1 — e' 
and 1 — 5. When we set a high confidence level, 1—e', the bound on 
the min-entropy reduces as expected. Note that the certified min- 
entropy is only determined by measured value L and the choice of e', 
independent of experimental details. 

Random number results. We perform ten thousand trials to gene- 
rate random bits as described in the previous section: [Experimental 
violation of the KCBS inequality] . At each trial, we choose one of the 
five measurement configurations shown in Fig. 1 (c) — (g) by 
computer-generated random numbers, perform the sequence 
composed of Doppler cooling, state initialization and rotations for 
the chosen configuration and finally record the existence of 
fluorescence (see Method section). As explained, we obtain a 
random bit, i.e., 1 (or 0) with fluorescence (or no fluorescence) for 
each trial. The sequence takes about 10 ms, mainly limited by the 
wave-form loading time to the pulse generator. Note that the random 




0 2 4 6 8 10 Batch 




Number of trials n (1 0 4 ) 

Figure 4 | Comparison between theory and experimental results. (a)(c)The min-entropy (vl V) (8) depending on the number of trials for (a) an 
uniform distribution of measurement settings P(V;) = 1/5 and (c) a biased distribution with P (Vi) = 1 — 4q y P (V 2 ) = P ( V 3 ) = P ( V A ) = P (V 5 ) = q, 
whereg= 6(100000)" 1/2 with the probablity of errors € = 0.01 and (5 = 0.001. The min-entropies Hoc (a I A) (8) are bounded by the relation of the violation 
L of the KCBS inequality (8), where we set the 10 intervals of L between £ 0 and C mmax . The min-entropies are linearly increasing as the number of trial 
increases and the slopes are basically dependent on the thresholds of the intervals £ 7 = 3.6610 (blue), £ 8 =3.7554 (green), £ 9 = 3.8496 (yellow), and 
Cio {C mmax ) = 3.944 (red). The black dots are obtained from the violation values that were observed at the number of trials, (b) (d) The correlation between 
the KCBS violations (8) and the min-entropy (8) of the strings for (b) the uniform input choices and (d) the baised settings. Here we divide the total 1 X 
10 5 numbers by 10 division and show the KCBS violations L and min-entropies in the division. We can clearly show that the monitor of L at each division 
provides sufficient information to guarantee the min-entropy in the division. 
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Random tests 



Figure 5 | The results for random tests. The summary for the results of random tests 31 on our generated random numbers. In the tests, we can consider 
the sequences as random if P - values of the tests are over the threshold that we set, 0.01. All of random numbers pass the listed tests. 



generator based on the CHSH inequality produced a random bit per 
several min. 

Figure 4 shows the min-entropies of generated strings discussed in 
the previous section: [The relation between violation of the KCBS 
inequality and the min-entropy]. We produce a string of length 1 X 
10 5 with uniform choices of the measurement settings, P ( V,-) = 1/5. 
As shown in Table 1, we observe the expectation L = 3.852 + 0.030, 
implying the min-entropy H^ m (v|V) > 5.24 x 10 4 with 99% confid- 
ence. Note that the other confidence level 3 does not have any notic- 
able influence on the bound of min-entropy. Here we used the 

thresholds of KCBS violations C 9 = 3.8496 ( = ^ ^m max ~ 3)^ ■ 

Fig. 4 shows clearly the advantage of our certification scheme, i.e., 
we can guarantee the min-entropy of the generated random string by 
only monitoring the violation L independent of experimental details. 
Fig. 4(a) shows the accumulated behavior of the min-entropy as the 
number of experimental trials n increases. The solid lines show the 
theoretical linear increment of the minentropies and the slopes are 
determined by only the thresholds C m . Due to drifts of experimental 
parameters, the violations L are fluctuating from one threshold to 
another, which accordingly introduces the changes to the min- 
entropy, accordingly. Fig. 4(b) shows details of the transient behavior 
of the generated random string. We monitor the violation L for each 
batch of n = 1 X 10 4 trials and estimate the min-entropy in the batch. 
Fig. 4(b) reveals that the min-entropies are correlated to the viola- 
tions L and completely determined by the thresholds C m at given 
confidence level 99%. Here, we we do not need massive random tests 
to ensure the amount actual random number in the generated string. 
The amount of min-entropy of our random numbers is guaranteed 
by the the measured violations L, regardless of unexpected changes of 
experimental parameters. 

We also generate random bits with a biased choice of measure- 
ment settings, where P (VJ = l- 4q y P (V 2 ) = P ( V 3 ) = P (V 4 ) = 
P (V 5 ) = q, and q = an" 1/2 with a = 6 and n = 10 5 . We observe 
basically the same behavior of the min-entropy for the generated 
stream except for a slightly smaller bound due to the non-uniform 
setting. We get the min- entropy bound H b J? (v| V) > 1.4 x 10 4 from 1 
X 10 5 rounds with violation of 1 = 3.901. For the biased choice of 
measurement settings, the output entropy (1.35 X 10 4 ) exceeds the 
input entropy (1.14 X 10 4 ), and we obtain 2.1 X 10 3 net random bits. 
For the case of uniform measurement settings, we always need more 
initial randomness and thus cannot obtain net randomness. This is 
similar to the random number generation scheme with the CHSH 
inequality, where to generate net randomness, one always needs to 
consider nonuniform measurement settings. 

Finally, we carry out a series of random tests (see Methods) 31 to 
examine the quality of our random numbers obtained by collecting 



the outcomes of the first measurement in each trial. As expected, our 
generated random numbers passed all the tests. Fig. 5 shows the 
summary of the test results. Actually the real randomness of our 
generated strings is already certified by the KCBS inequality, which 
is a much stronger statement than claiming that the produced num- 
bers pass all the random tests, since no random tests on finite strings 
should be considered complete. 

Discussion 

In summary, we have demonstrated violations of the KCBS inequal- 
ity using a single trapped ion, with the detection efficiency loophole 
closed for the first time. We use quantum contextuality to certify 
randomness of the measurement outcomes. The randomness of our 
device is ensured by observing violations of the inequality independ- 
ent of experimental details. With our device, we already obtained a 
net output entropy. The device can generate random numbers with a 
higher speed, which is important for practical applications. 

Methods 

Experiment procedure. The experimental procedure consists of Doppler cooling, 
initialization, coherent operations and detection. After 1 ms Doppler cooling, the 
internal state of the ion is initialized to |3) by 3 /us standard optical pumping with 
efficiency 99. 1% 26 . The states are coherently manipulated by the microwaves coi and 
ft> 2 that are resonant to the transitions between 1 1) and |3>, and between |2> and |3>, 
respectively. The quantum operations of the microwaves coi and co 2 are described by 
the rotation matrix £ x (6 ly (f)^ and R 2 (^2> ^2)* respectively. Here 6 ly 9 2 and </> lt (j) 2 are 
controlled by the duration and the phase of the applied microwaves. The 2 n times for 
both Rabi oscillations are adjusted to 29.5 [is, that is Q 12 = (2n) 33.9 kHz in 
frequency. The maximum probability of off- resonant excitation Q 2 /(co 2 — coi) 2 is 
about 1.6 X 10" 5 , small enough to ensure independence of each Rabi oscillation. The 
standard fluorescent -detection method enables us to differentiate between one state 
versus the other two states of a qutrit. We observe on average 10 photons at 369.5 nm 
for the 1 1) or the |2) state and detect no photon for the |3> state. The state detection 
error rates for wrongly registering the state |3> and missing the state |3> are 0.9% and 
1.9%, respectively, with the discrimination threshold n ph = 1. As shown in Fig. 2(b), 
we transfer the information of obervable A t (Aj) by 7r-pulse and apply the 
measurement sequence. Then we assign the value a t = 1 (a,- = 1) on the obsevable A { 
(Aj) when photons detected or a { = — 1 (a ; - = — 1) when no photons are detected. 
After repeating the same experimental procedures, we obtain the (A t ) «A ; )). Here we 
emphasize that our setup is not subject to detection loophole and provide a value of 
the measurement at every trial. 

Random test. We apply the random tests that are appropriate for the size of our 
random numbers, which are 'Frequency', 'Block Frequency', Cumulative Sums 
(Cusums)', 'Runs', 'Longest-Run-of-Ones in a Block (LROB)', 'Rank', 'Discrete 
Fourier Transform Test (FTT)', 'Approximate Entropy (AE), 'Serial' Thep-values of 
all the test, which are the probabilities that an ideal random number generator would 
produce less random sequence than the tested one. Therefore, a p-value of 0 simply 
means that the tested sequence appears to be completely non-random, whereas a p- 
value of 1 implies that the sequence in test appears to be perfectly random. The p- 
values lie in the open interval (0, 1) and if p- value is larger than a significance level 9, 
we accept the sequence as random for the test. Typically 9 is chosen to be in the range 
[0.0001, 0.01] and we set 6 = 0.01. Note that we use Von-Neumann extractor for the 
output strings to make uniform distributions, which reduces the size of random 
numbers to one quarter. We also note that the random tests are different from 
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guaranteeing the amount of min-entropy in the generated string. In other words, even 
the data could not pass the random tests but still have the quoted min-entropy. 
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